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APPARATUS AND METHOD FOR SECURE DISTRIBUTION OF 
MOBILE STATION LOCATION INFORMATION 

The present invention claims priority to United States 
Provisional Application Serial No. 60/312,556 filed on August 15, 
2001. 

TECHNICAL FIELD OF THE INVENTION 

The present invention is directed, in general, to wireless 
access systems and, more specifically, to system and method for 
providing secure access to mobile station location information to 
authorized persons. 

BACKGROUND OF THE INVENTION 

Wireless mobile stations will soon be required to be able to 
determine their geographic location. This location information is 
required to be relayed only to the wireless service provider or a 
Public Service Access Point (PSAP) (e.g., emergency personnel). 

Various methods exist in the art for a wireless mobile station 
to determine its location. For example, the mobile station can use 
received signal strength indications from multiple base stations to 
triangulate its position. Additionally, the mobile station may have 
a global positioning system (GPS) receiver that can receive signals 
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from the GPS satellite constellation in order to determine its 
position to within a few feet. 

While this position information is necessary for emergency 
purposes, it would also be useful for targeting commercial services 
to the mobile station's user. However, the location information is 
provided only to emergency services personnel or to location 
technology-enabled devices that have access to the precise location 
information. There is a resulting need for a way to make this 
location information available to select individuals and/or 
organizations . 
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SUMMARY OF THE INVENTION 

To address the above-discussed deficiencies of the prior art, 
it is a primary object of the present invention to provide a mobile 
station's geographic location to authorized client access devices. 

The present invention encompasses an apparatus for 
transferring geographic location information associated with the 
mobile station to a server accessible via a communication network 
coupled to the wireless network. The apparatus comprises memory 
that stores mobile station current position information and at 
least one encrypt ion/ decryption key. 

The apparatus further comprises a controller, coupled to the 
memory, that is capable of determining the geographic location 
information and storing it in the memory. The controller is 
additionally capable of establishing a secure connection with the 
server, using the at least one encryption/decryption key, over the 
wireless network over which the geographic location information is 
transmitted. 

The foregoing has outlined rather broadly the features and 
technical advantages of the present invention so that those skilled 
in the art may better understand the detailed description of the 
invention that follows. Additional features and advantages of the 
invention will be described hereinafter that form the subject of 



ATTY. DOCKET NO. SAMS01- 00147 



PATENT 



the claims of the invention. Those skilled in the art should 
appreciate that they may readily use the conception and the 
specific embodiment disclosed as a basis for modifying or designing 
other structures for carrying out the same purposes of the present 
invention. Those skilled in the art should also realize that such 
equivalent constructions do not depart from the spirit and scope of 
the invention in its broadest form. 

Before undertaking the DETAILED DESCRIPTION OF THE INVENTION 
below, it may be advantageous to set forth definitions of certain 
words and phrases used throughout this patent document: the terms 
"include" and "comprise," as well as derivatives thereof, mean 
inclusion without limitation; the term "or," is inclusive, meaning 
and/or; the phrases "associated with" and "associated therewith," 
as well as derivatives thereof, may mean to include, be included 
within, interconnect with, contain, be contained within, connect to 
or with, couple to or with, be communicable with, cooperate with, 
interleave, juxtapose, be proximate to, be bound to or with, have, 
have a property of, or the like. Definitions for certain words and 
phrases are provided throughout this patent document, those of 
ordinary skill in the art should understand that in many, if not 
most instances, such definitions apply to prior, as well as future 
uses of such defined words and phrases. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

For a more complete understanding of the present invention, 
and the advantages thereof, reference is now made to the following 
descriptions taken in conjunction with the accompanying drawings, 
5 wherein like numbers designate like objects, and in which: 

FIGURE 1 illustrates selected portions of an exemplary 
telecommunication network in which a mobiles station according to 
the principles of the present invention may operate; 
JZ FIGURE 2 illustrates an exemplary wireless mobile station in 

ti greater detail according to one embodiment of the present 

hi 

. invention; 

FIGURE 3 illustrates the exemplary mobile station (MS) 
L location server in greater detail according to one embodiment of 
?n the present invention; and 

|2§ FIGURE 4 is a flow diagram illustrating the operation of the 

exemplary mobile station and the exemplary MS location server 
according to one embodiment of the present invention. 
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DETAILED DESCRIPTION OF THE INVENTION 

FIGURES 1 through 4, discussed below, and the various 
embodiments used to describe the principles of the present 
invention in this patent document are by way of illustration only 
and should not be construed in any way to limit the scope of the 
5 invention. Those skilled in the art will understand that the 
principles of the present invention may be implemented in any 
mobile station for use in a wireless access system. 

FIGURE 1 illustrates selected portions of an exemplary 
ifi telecommunication network 100 in which a mobiles station according 
lq to the principles of the present invention may operate. An example 
il : of one such telecommunication network is a cellular telephone 
U network. The present invention, however, is not limited to any one 
ry type of telecommunication network. 

n Base station 101 communicates with at least one mobile station 

15 (MS) 111 over, for example, code division multiple access (CDMA) 
channels, time division multiple access (TDMA) channels, frequency 
division multiple access (FDMA) channels, or the like. Mobile 
station 111 may be any suitable wireless device, including a 
conventional cellular radiotelephone, PCS handset device, personal 
20 digital assistant, portable computer, or metering device. 

In one embodiment of the present invention, BS 101 comprises a 
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base station controller (BSC) and one or more base transceiver 
stations (BTS) . A base station controller is a device that manages 
wireless communications resources, including the base transceiver 
stations, for specified cells within a wireless communications 
network. A base transceiver station comprises the RF transceivers, 
antennas, and other electrical equipment located in each cell site. 
This equipment may include air conditioning units, heating units, 
electrical supplies, telephone line interfaces, and RF transmitters 
and RF receivers. 

For the purpose of simplicity and clarity in explaining the 
operation of the present invention, only one base station and one 
mobile station are illustrated. In alternate embodiments, however, 
telecommunication network 100 would typically be comprised of a 
plurality of base stations that communicate with a plurality of 
mobile stations. 

BS 101 transfers voice and data signals between MS 111 and the 
Internet 150 via communication lines and mobile switching center 
(MSC) 140. The communication lines may be any suitable connection 
means, including a Tl line, a T3 line, a fiber optic link, a 
network backbone connection, or any other type of data connection. 
MSC 140 is well known to those skilled in the art. 

MSC 140 is a switching device that provides services and 
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coordination between the subscribers in a wireless network and 
external networks, such as the public switched telephone network 
(PSTN) or Internet 150. In some embodiments of the present 
invention, the communication lines may be several different data 
5 links where each data link couples a plurality of base stations 
with the mobile switching center. 

Mobile station location server 160 is coupled to the 
Internet 150 through a communication line as described above. 
Li Mobile station (MS) location server 160 may be operated by a 

B wireless service provider, such as AT&T, SPRINT, or another type of 

iU 

rj service provider. MS location server 160 is a computer server 
i\ comprising a controller such as a data processor and memory. A 
f. server of the present invention is subsequently illustrated in 
pH greater detail with reference to FIGURE 3 . 

I?! MS location server 160 may be accessed through Internet 150 by 

a plurality of client access devices, including exemplary client 
access devices 171, 172 and 173. Client access devices 171, 172 
and 173 may include any type of device that can operate over a 
TCP/IP network (such as Internet 150) or a similar conventional 

20 communication network. Client access devices 171-173 may be, for 
example, personal computers (PCs) , other data servers, personal 
digital assistant (PDA) systems, telephones, or the like. 
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For purposes of clarity, only three client access devices are 
illustrated in FIGURE 1. In reality, hundreds of thousands or even 
millions of client access devices may be able to access MS location 
sever 160. Additionally, client access devices may be local to the 
mobile station location server or thousands of miles away. 

FIGURE 2 illustrates exemplary wireless mobile station 111 in 
greater detail according to one embodiment of the present 
invention. Wireless mobile station 111 comprises antenna 205, radio 
frequency (RF) transceiver 210, transmitter (TX) processing 
circuitry 215, microphone 22 0, receiver (RX) processor 
circuitry 225, speaker 230, main processor 240, input/output (I/O) 
interface (IF) 245, keypad 250, display 255, and position 
locator 260, which may be, for example, a global positioning system 
(GPS) receiver. Wireless mobile station 111 further comprises 
memory 270, that stores basic operating system (OS) program 271, MS 
current position file 281, encrypt ion- decrypt ion key(s) file 282, 
encryption-decryption application program 283, and MS location 
server access application program 284. 

Wireless mobile station 111 may be a cell phone, a personal 
digital assistant (PDA) device equipped with a wireless modem, a 
two-way pager, a personal communication system (PCS) device, or any 
other type of wireless mobile station. 
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RF transceiver 210 receives, from antenna 205, an incoming RF 
signal transmitted by a base station of a wireless communication 
network. RF transceiver 210 down- converts the incoming RF signal to 
produce an intermediate frequency (IF) or a baseband signal. The IF 
or baseband signal is sent to RX processing circuitry 225 that 
produces a processed baseband signal by filtering, decoding, and/or 
digitizing the baseband or IF signal to produce a processed 
baseband signal. RX processing circuitry 225 transmits the 
processed baseband signal to speaker 230 (i.e., voice data) or to 
main processor 240 for further processing (i.e., web browsing), 

TX processing circuitry 215 receives analog or digital voice 
data from microphone 220 or other outgoing baseband data (i.e., web 
data, e-mail, interactive video game data) from main processor 240. 
TX processing circuitry 215 encodes, multiplexes, and/or digitizes 
the outgoing baseband data to produce a processed baseband or IF 
signal . 

RF transceiver 210 receives the outgoing processed baseband or 
IF signal from TX processing circuitry 215. RF transceiver 210 up- 
converts the baseband or IF signal to an RF signal that is 
transmitted via antenna 205. 

Main processor 240, in one embodiment, is a microprocessor or 
microcontroller. Main processor 240 executes basic OS program 271 
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in order to control the overall operation of wireless mobile 
station 111. In one such operation, main processor 240 controls the 
reception of forward channel signals and the transmission of 
reverse channel signals by RF transceiver 210, RX processing 
circuitry 225, and TX processing circuitry 215, in accordance with 
well known principles. Main processor 240 is also capable of 
controlling and/or interfacing with position locator 260 in order 
to transfer the determined location to memory 27 0 or to TX 
processing circuitry 215. 

Main processor 24 0 is capable of executing other processes and 
programs that are resident in memory 270. Main processor 240 can 
move data into or out of memory 270, as required by an executing 
process. Main processor 240 is also coupled to I/O interface 245. 
I/O interface 245 provides the mobile station with the ability to 
connect to other devices such as laptop computers and handheld 
computers. I/O interface 245 is the communication path between 
these accessories and main controller 240. 

Main processor 240 is also coupled to keypad 250 and display 
unit 255. Keypad 250 is used by the end-user of the mobile station 
to enter data into the mobile station. Display 255, in the 
preferred embodiment, is a liquid crystal display capable of 
rendering text and/or at least limited graphics from Web sites. 
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Alternate embodiments use other types of displays . 

Memory 270 is coupled to main processor 240. Memory 270 may be 
comprised of solid-state memory such as random access memory (RAM) , 
various types of read only memory (ROM) , or Flash RAM . Memory 270 
may also include other types of memory such as micro-hard drives or 
removable storage media that stores data. 

Memory 270 stores basic operating system 271 that provides the 
basic operational control of mobile station 111. MS current 
position 281 indicates the current location of mobile station 111. 
Various methods used to provide the current location are discussed 
subsequently. 

Memory 270 also stores encryption-decryption key(s) 282 that 
are used to access MS current position 281. The use of encryption- 
decryption keys enables the mobile station to give its location out 
only to those having authorization from the mobile station user. In 
an alternate embodiment, passwords or personal identification 
numbers may be used to keep the location information confidential 

Encryption-decryption application program 283 is stored in 
memory 2 70 in order to compare any received keys with encryption- 
decryption keys 282. If a match occurs, the location is decrypted. 
If a match does not occur, the position of the mobile station 
remains encrypted. The operation of this feature is discussed 
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subsequently with reference to the flow diagram of FIGURE 4. 

Memory 270 additionally stores MS location server access 
application program 284. This program provides the mobile station 
access to the MS location server that was illustrated in FIGURE 1. 
MS location server access application program 2 84 may be an e-mail 
program (e.g., EUDORA) , a Transmission Control Protocol/Internet 
Protocol (TCP/IP) program, a User Datagram Protocol (UDP) program, 
a short messaging service (SMS) program, a CDMA data burst program, 
or any combination of these programs. These various types of 
communication programs are for illustration purposes only. The 
present invention is not limited to any one type or combination of 
server access programs . 

FIGURE 3 illustrates exemplary mobile station (MS) location 
server 160 in greater detail according to one embodiment of the 
present invention. MS location server 160 comprises data 
processor 3 05 and memory 310. Data processor 3 05, in one 
embodiment, is a microprocessor or microcontroller. Other 
embodiments use other types of controllers, such as parallel 
processors, for greater processing power. Data processors are well 
known in the art and are not discussed further. 

Memory 310 may be comprised of solid-state memory such as 
random access memory (RAM) , various types of read only memory 
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(ROM) , or Flash RAM. Memory 310 may also include other types of 
memory such as micro-hard drives or removable storage media that 
stores data. 

Memory 310 is coupled to data processor 305 and stores basic 
operating system 320, MS position server application program 330, 
client access interface (IF) application program 340, and mobile 
station database 350. Mobile station database 350 contains N mobile 
station records, including exemplary mobile station records 360, 
370 and 380, which are arbitrarily labeled MSI Record, MS 2 Record, 
and MSn Record, respectively. 

Exemplary mobile station record 360 contains MSI profile 
field 361, authorized client profile (s) field 362, and encryption- 
decryption key(s) 363. Exemplary mobile station records 370 and 380 
contain similar data fields. 

Basic operating system 32 0 is run by data processor 3 05 in 
order to control the overall operation of the location server. MS 
position server application program 330, as illustrated in greater 
detail in FIGURE 4, is responsible for controlling access to the 
location information from the mobile station. In one embodiment, MS 
position server application program 330 may determine when and how 
often to query the mobile station in order to retrieve the location 
information. 
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MS position server application program 33 0 may also be 
responsible for controlling access to mobile station database 360. 
For example, if a request is received for location information for 
a particular mobile station, that request must contain a proper 
decryption key. MS position server application program 330 
determines if that decryption key is accurate so that the 
requesting entity can access the location information. 

Client access IF application program 340 may be comprised of 
an e-mail program (e.g., EUDORA) , a Transmission Control 
Protocol/Internet Protocol (TCP/IP) program, a User Datagram 
Protocol (UDP) program, a short messaging service (SMS) program, a 
CDMA data burst program, or any combination of these programs. 
These various types of communication programs are for illustration 
purposes only. The present invention is not limited to any one type 
or combination of server access programs. 

The mobile station profile 361 contains the geographic 
location information for that particular mobile station. This 
profile may also be comprised of additional information that 
relates to the mobile station such as information about the 
subscriber . 

The authorized client profile 362 is comprised of a list of 
clients that are authorized to have access to MSl's record 3 60. 
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This authorized client profile 3 62 may contain additional 
information regarding these client devices as well. 

Encryption/decryption keys 363 comprises the list of keys that 
can be used to access MSI record 360. This list may be one key or 
5 any number of keys that can be used. 

FIGURE 4 depicts flow diagram 400, which illustrates the 
operation of mobile station 111 and MS location server 160 
according to one embodiment of the present invention. In the normal 
course of operation, wireless network 100 will periodically, 
P aperiodically, or in response to a discrete event, use base 
W stations or other conventional monitoring devices to determine the 
=P location of MS 111 according to conventional methods. Wireless 

sals 

network 100 then transmits MS 111 position information to MS 111. 
[U Alternatively, MS 111 will periodically, aperiodically , or in 
Jf response to a discrete event, use position locator 2 60 to determine 
^ its own location (process step 405) . In either event, once MS 111 

contains its own position information, MS 111 accesses MS location 

server 160 and establishes a secure connection (process step 410) . 

MS 111 then transmits encrypted location data to MS location server 
20 160. 

MS location server 160 stores the encrypted MS 111 position 
data in a corresponding record in mobile station database 3 50 
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(process step 415) . Thereafter, MS location server 160 may 
periodically or aperiodically receive access requests from client 
access devices. MS location server 160 then authenticates the 
client access devices using user name and password verification 
procedures (process step 420) . In one embodiment of the present 
invention, if the client access device properly authenticates, MS 
location server 160 transmits the encrypted MS 111 position data to 
the client access device, which then decrypts the MS 111 position 
data. In an alternate embodiment of the present invention, MS 
location server 160 decrypts the MS 111 position data and transmits 
unencrypted MS 111 position data to authenticated client device 
(process step 425) . 

In summary, a secure distribution of mobile station location 
information is provided by the method and apparatus of the present 
invention. This location distribution can be used by service 
providers in order to generate additional revenue. 

For example, a service provider may sell the information on 
pay-per-use basis or subscription basis to companies wishing to 
market products and/or services to mobile station users in a 
certain geographic area. Business travelers can use the information 
to automatically download locations of certain nearby services such 
as car rentals companies, hotels, or automobile service facilities. 
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Parents can use the present invention to keep track of 
children. Businesses can track delivery personnel so they know 
which delivery person to use to ensure a quicker response to 
customers . 

Although the present invention has been described in detail, 
those skilled in the art should understand that they can make 
various changes, substitutions and alterations herein without 
departing from the spirit and scope of the invention in its 
broadest form. 
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